$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/1647AB229DF911F085AD790CC4F9AE02.roa File: 1647AB229DF911F085AD790CC4F9AE02.roa (raw, json) Hash identifier: UCsc4SzKXp7wzPGhzdY7JRvMDKVrlh7+bSK0nsp/FNA= Subject key identifier: 96:4B:AE:12:BB:E0:B1:1E:0B:CF:6D:07:90:2D:6B:9D:AC:BE:A6:D1 Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Certificate serial: 19B2 Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/1647AB229DF911F085AD790CC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:01:57 +0000 ROA not before: Wed 03 Dec 2025 18:00:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 31898 IP address blocks: 103.28.48.0/22 maxlen: 24 122.201.64.0/19 maxlen: 24 122.201.96.0/19 maxlen: 24 202.146.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6578 (0x19b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Validity Not Before: Dec 3 18:00:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47f15-e7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:0a:52:50:e0:c6:00:38:c4:bb:3a:58:4a: 85:4d:ba:02:30:cf:d7:13:3d:d7:24:80:e9:41:bb: b3:1c:73:d2:b9:e8:b2:a1:77:2e:3f:7c:3b:6f:34: b3:0f:66:0b:f2:07:0b:8d:05:08:37:fd:ed:91:61: b2:a7:80:55:02:dd:af:cc:a8:a5:90:2c:6f:86:7d: a9:47:e4:3a:bd:a1:33:9f:60:46:e4:3b:8a:17:a2: 77:3f:f2:97:50:fa:c6:c6:81:2b:6e:8d:fd:55:72: ff:57:78:e3:d2:22:fa:23:74:ab:f4:bc:d7:64:59: 56:46:b8:56:6c:3b:5f:3f:81:94:4f:75:c3:21:d5: 89:76:81:72:4c:6f:85:a1:0c:f2:cb:12:0c:78:98: 89:33:1a:85:d6:ec:2f:ae:5c:78:75:4c:32:51:a9: 5e:1e:34:94:16:09:f6:e5:d4:22:80:54:30:73:c5: 7f:e9:c4:ad:ae:39:7f:ea:1d:a0:72:c8:de:70:c1: 5c:37:a5:01:a4:b5:57:bb:d3:41:ff:99:3d:f2:c7: 6d:76:c0:2c:e1:32:10:0e:f2:8c:2f:fb:24:c3:9f: 10:0a:ff:39:f7:f2:b0:3c:37:60:0a:29:62:b4:4e: d3:c1:7b:b6:4f:80:69:56:98:dd:c2:7e:43:f0:ab: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4B:AE:12:BB:E0:B1:1E:0B:CF:6D:07:90:2D:6B:9D:AC:BE:A6:D1 X509v3 Authority Key Identifier: keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/1647AB229DF911F085AD790CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.28.48.0/22 122.201.64.0/18 202.146.208.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:eb:b3:f6:0f:ad:f3:d6:59:73:00:65:07:41:9d:f3:76:73: f9:b6:70:82:2c:d2:b1:4e:6f:92:20:3b:4f:68:fe:7e:99:a2: db:a5:4f:fc:65:f9:92:af:59:ec:c5:1f:e1:80:8d:31:02:47: 51:4b:04:63:07:b4:af:76:33:b9:1a:8a:80:81:3a:14:d1:0c: 30:87:e0:23:65:73:3a:04:9e:06:df:3d:f4:ee:55:3a:ac:57: 1f:ae:c2:7a:da:fb:61:37:40:4c:b7:9d:7c:20:69:79:f3:ad: fb:68:f8:7e:26:5d:00:d9:9b:3d:77:56:3b:6d:5a:cc:fa:6f: 66:49:e5:0c:5f:dd:d8:2d:97:60:bc:3b:a4:94:d2:7a:ca:63: 00:90:1b:a8:8b:76:66:b5:05:ce:d9:46:c3:89:81:60:52:2e: 20:bf:f7:70:71:41:9b:d4:c7:d2:9a:98:42:85:af:db:71:bf: f4:6e:21:86:07:98:0c:11:b2:f1:46:fd:45:72:9b:7d:0f:9e: bf:f5:ef:e3:8c:ea:44:53:6a:68:23:45:31:74:49:b2:bf:95: d4:52:53:e7:c9:91:ec:08:cf:83:36:f8:52:ad:f0:3a:4d:87: e4:8a:c1:4b:9c:47:7a:a3:57:9a:7b:3a:02:70:14:b5:cd:48: b2:ab:e7:57 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICGbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz MzI5ODU5NzAwHhcNMjUxMjAzMTgwMDAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2YxNS1lN2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsx0KUlDgxgA4xLs6WEqFTboCMM/XEz3XJIDpQbuzHHPSueiyoXcuP3w7bzSz D2YL8gcLjQUIN/3tkWGyp4BVAt2vzKilkCxvhn2pR+Q6vaEzn2BG5DuKF6J3P/KX UPrGxoErbo39VXL/V3jj0iL6I3Sr9LzXZFlWRrhWbDtfP4GUT3XDIdWJdoFyTG+F oQzyyxIMeJiJMxqF1uwvrlx4dUwyUaleHjSUFgn25dQigFQwc8V/6cStrjl/6h2g csjecMFcN6UBpLVXu9NB/5k98sdtdsAs4TIQDvKML/skw58QCv859/KwPDdgCili tE7TwXu2T4BpVpjdwn5D8Kv+LwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJZLrhK7 4LEeC89tB5Ata52svqbRMB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5 NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY5RkIvQUYwMDk4RDA4OTZGMTFFNzhBODFDODNDQzRGOUFFMDIvMTY0N0FCMjI5 REY5MTFGMDg1QUQ3OTBDQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZxwwAwQGeslAAwQDypLQMA0GCSqGSIb3DQEBCwUAA4IBAQB+67P2 D63z1llzAGUHQZ3zdnP5tnCCLNKxTm+SIDtPaP5+maLbpU/8ZfmSr1nsxR/hgI0x AkdRSwRjB7SvdjO5GoqAgToU0Qwwh+AjZXM6BJ4G3z307lU6rFcfrsJ62vthN0BM t518IGl58637aPh+Jl0A2Zs9d1Y7bVrM+m9mSeUMX93YLZdgvDuklNJ6ymMAkBuo i3ZmtQXO2UbDiYFgUi4gv/dwcUGb1MfSmphCha/bcb/0biGGB5gMEbLxRv1Fcpt9 D56/9e/jjOpEU2poI0UxdEmyv5XUUlPnyZHsCM+DNvhSrfA6TYfkisFLnEd6o1ea ezoCcBS1zUiyq+dX -----END CERTIFICATE-----Generated at Sun Mar 22 15:00:29 2026 by rpki-client